Operating a licensed venue in Victoria comes with significant legal obligations around security. The Liquor Control Reform Act 1998, the Private Security Act 2004, and your specific licence conditions all have requirements that venue operators must understand — and that your security provider must comply with. This article outlines the key obligations.
When Is Security Required at a Licensed Venue?
Under the Liquor Control Reform Act 1998, the Victorian Commission for Gambling and Liquor Regulation (VCGLR) can impose a security requirement as a condition of your liquor licence. Common triggers include:
- Venues licensed to trade after midnight
- Venues with a history of incidents
- Venues in high-density entertainment precincts
- Venues that have had their licence reviewed
- Venues applying for extended trading permits
Even where no security condition is imposed, venue operators have a duty of care to patrons and a legal obligation to maintain a safe environment. Failing to manage foreseeable risks — including patron aggression — can result in civil liability even if no licensing condition was breached.
Licensing Requirements for Crowd Controllers
In Victoria, crowd controllers at licensed premises must hold a current Personal Licence under the Private Security Act 2004 with the Crowd Controller category. This requires:
- Completing the Certificate II in Security Operations with crowd control units
- Passing a character assessment by Victoria Police
- Meeting the RSA (Responsible Service of Alcohol) requirement
- Holding a current first aid certificate
Deploying an unlicensed crowd controller at a licensed venue is an offence for both the security company and the venue operator. It can result in prosecution, fines, and may affect your liquor licence.
RSA Obligations for Crowd Controllers
All crowd controllers at licensed venues must hold a current Responsible Service of Alcohol (RSA) accreditation. This means they must be trained to identify signs of intoxication and have the authority — and obligation — to refuse service of alcohol to intoxicated persons.
In practice, crowd controllers often work alongside bar staff on RSA compliance — refusing entry to visibly intoxicated persons seeking to enter, and requesting that intoxicated patrons leave. The interaction between crowd controller RSA obligations and bar staff RSA obligations should be clearly documented in your venue's service protocol.
The Exclusion Register
Victoria operates an Exclusion Register for licensed venues — a record of persons who have been excluded from venues or who are subject to court-ordered venue exclusions. Crowd controllers are responsible for checking the Exclusion Register and refusing entry to listed persons.
Failing to check the Exclusion Register is a licensing offence. Your security provider must have a clear protocol for checking the register and must brief all crowd controllers on their obligations.
Use of Force — What's Permitted
Crowd controllers have the right to use reasonable force to eject patrons from licensed premises. "Reasonable force" means the minimum force necessary to achieve the legitimate objective (removing an intoxicated or threatening patron). Excessive force — regardless of provocation — creates civil and criminal liability for the officer and the venue.
Proper ejection procedures should be documented and drilled: verbal request to leave, physical escort to the exit as a last resort, and police called immediately if force beyond escort is required. Most professional crowd controllers are trained to achieve ejections through communication and compliance rather than physical force.
Incident Reporting Obligations
Serious incidents at licensed venues must be reported to Victoria Police and may require notification to the VCGLR. Your security provider should produce a written incident report for every significant event — assault, ejection, medical emergency, or police attendance. These reports are your evidence of responsible management if your licence is ever reviewed.
What to Look for in a Crowd Control Provider
When engaging crowd control for your venue, verify:
- The company holds a Master Licence under the Private Security Act 2004
- All deployed officers hold current crowd controller endorsements
- All officers hold current RSA accreditation
- The company has professional indemnity and public liability insurance
- Officers are briefed on your specific venue conditions and RSA protocols
- The company provides written incident reports after every shift
A security company that cannot confirm all of the above is not an appropriate provider for a licensed venue.
Ready to Talk Security?
Get a free, no-obligation security assessment for your business.
Related Articles
How Many Security Guards Do I Need for My Event?
A practical guide to calculating the right number of security guards for your event.
Security Guard Licensing in Victoria Explained
What licences security guards and companies need, how to verify them, and why it matters.
Event Security Planning Guide for Melbourne Events
How to plan event security properly — from risk assessment to briefing your team.